Refer to the exhibit.
Which three CLI commands are generated by these Cisco ASDM configurations? (Choose three.)
A.
object-group network testobj
B.
object network testobj
C.
ip address 10.1.1.0 255.255.255.0
D.
subnet 10.1.1.0 255.255.255.0
E.
nat (any,any) static 192.168.1.0 dns
F.
nat (outside,inside) static 192.168.1.0 dns
G.
nat (inside,outside) static 192.168.1.0 dns
H.
nat (inside,any) static 192.168.1.0 dns
I.
nat (any,inside) static 192.168.1.0 dns
Explanation:
http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/inspect_basic.html#wp 1350877
When DNS inspection is enabled, DNS rewrite provides full support for NAT of DNS messages originating from any interface.
If a client on an inside network requests DNS resolution of an inside address from a DNS server on an outside interface, the DNS A-record is translated correctly. If
the DNS inspection engine is disabled, the A-record is not translated.
As long as DNS inspection remains enabled, you can configure DNS rewrite using the alias, static, or nat commands.
DNS Rewrite performs two functions:
·Translating a public address (the routable or “mapped” address) in a DNS reply to a private address (the “real” address) when the DNS client is on a private
interface. ·Translating a private address to a public address when the DNS client is on the public interface.